[EMAIL PROTECTED] (Florian Weimer) writes: > * Bdale Garbee: > >> The second is whether it's acceptable for a Debian package to >> *require* a specific username. > > There are a couple of setuid binaries which might have problems > switching to a more flexible scheme. I fear such a requirement might > actually reduce overall security.
Right. After digesting the replies here and some off-list discussions, I now agree that while it is desireable for packages to be flexible about usernames to support the kinds of situations I described, requiring all Debian packages to be flexible in this way is not a reasonable objective. Bdale -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
